Yeah, perfect analogy. No amount of external helper tools making installs from GitHub easier would change the security implications. (Cargo-binstall is an example of such a helper.)